Effective Date: October 5, 2025 | Last Updated: 23 March, 2026

Indux Technologies (“Indux”, “we”, “us”, “our”) operates Indux CRM and integrates WhatsApp Business services and Google Calendar Integrations to enable businesses to communicate with their customers. This Privacy Policy explains how we collect, use, disclose, and protect personal information processed through our CRM, WhatsApp Business and Google Calendar integrations. It is designed to meet the requirements of our service partners, including Meta and Google and general privacy best practices. This is not legal advice.

1. Scope & Applicability

This policy applies when you interact with Indux via WhatsApp through our CRM (including text and media), and to information collected for registering, verifying, and using WhatsApp Business. It covers data processed through our web application and Google API connections. It does not cover third-party services we do not control.

2. Roles of Indux and Business Clients

For messaging conducted by our business clients using Indux CRM, the business client is typically the data controller and Indux acts as a data processor/service provider on their behalf. For our own websites, accounts, and support channels, Indux is the data controller.

3. Information We Collect

• Identifiers & Account Info: Name, email address, phone number, business name, address, and business verification details.
• Message Content & Media: text messages, images, videos, voice notes, documents sent via WhatsApp.
• Metadata & Logs: timestamps, delivery/read statuses, sender/receiver identifiers, system and connection metadata.
• Technical & Usage Data: device/browser type, IP address, diagnostic logs, analytics events.
• Business Profile Data: business category, display name, profile photo, description, and template usage info.
• Google User Data: When a User connects their Google Calendar, we collect the Google email address and OAuth tokens (Access and Refresh tokens).
• Event Data: Event titles, descriptions, timestamps, and attendee email addresses (Leads/Customers).
•  

4. Legal Basis & User Consent

• Consent/Opt-in: clear, affirmative opt-in is required before businesses message users on WhatsApp.
• Performance of a contract/legitimate interests: to deliver transactional notifications and support messages requested by users.
• Compliance with law and WhatsApp/Meta policies: to meet audit, fraud prevention, and record-keeping obligations.

5. How We Use Information

• Deliver transactional messages, service updates, alerts, and customer support via WhatsApp.
• Operate, verify, and maintain WhatsApp Business accounts and message templates.
• Monitor system performance, troubleshoot, and improve product features.
• Prevent fraud, abuse, and policy violations; enforce terms and acceptable use.
• Comply with legal obligations, including responding to lawful requests.
• To facilitate business communication via Google Calendar.
• To generate unique meeting links and manage attendee notifications.
• To maintain synchronization between your CRM dashboard and external calendars.

6. Sharing & Disclosure

• WhatsApp/Meta: messages and metadata transit WhatsApp infrastructure and are subject to WhatsApp Business Terms and policies.
• Service Providers (processors): limited data is shared with hosting, analytics, and security vendors under contractual safeguards. Data is shared with Google (for Calendar/Meet) and Meta (for WhatsApp) only to perform the services requested by the User.
• Business Clients: where you interact with a business using Indux CRM, that business may access your conversations and related data.
• Legal/Regulatory Authorities: where required by law, subpoena, or legal process. We may disclose information if required by law or to protect the rights and safety of our users.
• Business Transfers: In the event of a merger or sale, data may be transferred, subject to the same privacy protections.
• No Selling: we do not sell or rent personal data.

7. Opt-In, Templates, and Opt-Out

Before a business messages you on WhatsApp, it must obtain your explicit opt-in that clearly states the business name and that you agree to receive messages. Approved message templates are required for business-initiated conversations, and promotional or marketing content must comply with WhatsApp policies where permitted. You can opt out at any time by replying with keywords like “STOP” or by contacting us or the business directly.

8. Data Retention

Security: We use industry-standard encryption (TLS) for data in transit and secure database hashing for tokens at rest.

Retention: We retain data as long as the User account is active. Upon account deletion, Google OAuth tokens and associated records are purged from our active servers within 30 days.

Indux retains WhatsApp message logs, media (where stored), and related metadata for as long as your account or the relevant business relationship remains active, or as required by law. Upon termination or valid deletion request, we delete or anonymize data unless retention is legally required. Backup copies may persist temporarily but are not used for active processing.

9. Security Measures

• Encryption in transit (TLS) and platform protections; WhatsApp provides end-to-end encryption between users and WhatsApp.
• Access controls, least-privilege, audit logging, and regular security reviews.
• Vendor due diligence and data minimization.

10. International Transfers

Where data is transferred across borders, we implement appropriate safeguards consistent with applicable laws. WhatsApp/Meta may process data in various jurisdictions according to their policies.

11. Your Rights

• Access: request a copy of your data processed via Indux CRM.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion subject to legal/contractual requirements.
• Objection & Restriction: object to or restrict certain processing where applicable.
• Withdrawal of Consent: opt out of WhatsApp messaging at any time.
• Portability: request export of certain data where applicable.
• Disconnecting Services: Users can revoke Google Calendar access at any time via the CRM settings or through the Google Security Settings.
• Access & Deletion: Users and Invitees may request access to or deletion of their personal data by contacting us at the email below.

12. WhatsApp Business / Meta Verification Compliance

Indux and its business clients adhere to WhatsApp Business Terms, Business Messaging Policy, and opt-in requirements. We maintain opt-in records, support unsubscribe mechanisms, and use approved templates for business-initiated conversations. Accounts that violate policy (e.g., spam or misclassification) may face enforcement actions by WhatsApp/Meta.

13. Google API Disclosure & Data Usage

Indux CRM integrates with Google Calendar APIs to enable automated scheduling and virtual meetings.

• Access: We request access to auth/calendar.events. This allows Indux CRM to create, view, and edit events on your behalf.
• Google Meet: Our app uses this access to automatically generate Google Meet links for scheduled events.
• Automated Invites: When a User creates an event in the CRM, we use Google’s infrastructure to send calendar invitations and reminders to Invitees.
• Limited Use Requirement: Indux Technologies’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Non-Disclosure: We do not sell Google user data to third parties. We do not use Google user data for serving advertisements.

14. Changes to This Policy

We may update this policy periodically. Material changes will be communicated through our website, WhatsApp, or email. The “Last Updated” date will reflect the most recent changes.

15. Contact Information

Indux Technologies

No. 05, Geeta Paradise, Opp. Zensar, Kharadi, Pune, Maharashtra, India

Phone: +91 84215 38753

Email: connect@induxtechnology.com

Website: https://www.induxtechnology.com/

Disclaimer: This policy provides general information aligned to WhatsApp Business and industry guidelines. Consult legal counsel for specific compliance obligations.